Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: u4c1qwJ9TWATgmKTAMcATmYWWDAvo7ixDAZ/9U/tdpY=
Subject key identifier: 90:5A:61:20:C8:B9:A9:F2:7D:50:B4:5E:05:6A:F0:B3:B4:D8:03:7B
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3477
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Fri 15 Nov 2024 05:13:41 +0000
ROA not before: Fri 15 Nov 2024 05:13:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7604
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
180.233.131.0/24 maxlen: 24
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.19.12.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.19.0/24 maxlen: 24
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2401:402::/31 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 14:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13431 (0x3477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Nov 15 05:13:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6736d885-d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:a4:cb:9d:d5:89:a3:71:d7:87:6d:0d:e7:
c4:21:25:79:a7:6f:00:36:51:1b:db:ce:13:c9:f5:
9a:3d:87:87:74:7f:a4:98:f3:ed:1a:9e:9e:d7:0f:
f4:8d:07:ee:5b:bf:b3:51:64:ed:a7:c2:1c:4c:9c:
ed:ed:87:bb:4c:07:ea:62:0e:2a:dc:fb:55:9e:8b:
91:77:50:6a:a8:35:23:8a:1c:3c:24:83:04:7a:3f:
25:e7:83:9a:eb:56:d1:25:ab:e7:b4:e9:e3:b1:9c:
98:38:ac:e5:e0:ef:2c:55:b4:84:25:c6:a2:5e:c8:
af:81:4b:5a:b7:fd:f4:38:a1:af:d2:14:b4:ab:6a:
9c:52:51:9b:67:43:04:3d:e2:ab:35:ad:55:d1:4d:
15:21:61:a6:5b:63:48:f7:c1:e7:59:ac:68:0e:bd:
75:69:08:b6:36:61:69:74:ef:18:58:c7:68:6f:82:
4c:d9:03:b6:69:45:44:ab:d4:f8:15:11:3e:6a:c9:
4f:27:4c:f0:13:8d:e6:8f:bd:ed:66:0a:d4:78:24:
59:ba:81:47:dc:1c:ad:63:f4:79:24:75:19:4b:eb:
3d:21:00:35:38:38:85:be:92:a8:99:5c:53:d6:59:
89:e4:f8:f6:b9:a7:a3:bd:8f:f2:7c:a4:b1:02:a0:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5A:61:20:C8:B9:A9:F2:7D:50:B4:5E:05:6A:F0:B3:B4:D8:03:7B
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.129.0-180.233.131.255
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2401:402::/31
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
30:3c:8d:52:d6:f6:cb:f6:6d:a7:f9:82:97:52:79:51:ef:27:
32:3c:e8:52:e0:cc:c3:6e:ff:31:09:71:96:98:db:86:24:04:
e9:55:7e:aa:b6:02:b1:b1:85:55:44:80:c9:0f:13:63:59:f6:
a8:34:9a:33:61:e3:b9:37:04:e8:8a:33:15:ef:cd:88:df:4a:
40:0f:f2:7e:64:2f:de:6c:cb:03:52:c5:f1:19:54:8e:71:23:
1b:d9:5c:1c:3d:94:0b:5d:4e:12:b1:77:ac:ee:79:97:33:26:
1b:34:b9:3e:1d:77:cf:f9:62:68:f9:09:36:9c:fe:00:db:77:
3e:ac:be:92:e0:9b:ab:f6:0a:46:a7:cd:ac:3a:67:ff:13:a3:
81:81:50:ca:3b:9c:e4:80:76:37:af:5a:d1:1d:47:22:8e:a9:
01:60:e7:66:c1:6d:c2:39:b3:08:49:83:d5:b6:c6:16:d3:ef:
ce:99:4f:c3:dd:4a:ad:a6:5e:a6:48:74:f4:c3:de:da:9b:0d:
74:6c:e5:73:ce:ca:ff:8d:57:37:42:bf:75:06:38:39:1f:ea:
0a:88:e6:a5:88:66:50:18:8f:d0:bc:ea:9c:77:1a:57:94:93:
62:df:4f:c5:d4:83:35:e9:9d:b3:f3:19:bd:b2:c1:ba:50:f9:
9c:3c:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:43 2024 by rpki-client on console-fra.rpki-client.org